Description
Ghost versions 6.14.0 through versions prior to 6.27.0 contain a path traversal vulnerability in the ImageSize service. Insufficient input validation of user-supplied file paths may allow authenticated staff users to access local files outside the intended data storage directories on the server.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| TryGhost | Ghost | 6.14.0 – < 6.27.0 | 6.27.0 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | ghost | >= 6.14.0, < 6.27.0 | 6.27.0 | GHSA-83rp-q473-j88c |
References
- GitHub Security Advisory (GHSA-83rp-q473-j88c) vendor-advisory
- VulnCheck Advisory: Ghost 6.14.0 before 6.27.0 Path Traversal via ImageSize third-party-advisory